.env.example

DATABASE_URL=postgresql://user:password@localhost:5432/pauseai
NEXTAUTH_SECRET=your-secret-here
NEXTAUTH_URL=http://localhost:3000
AUTH_GOOGLE_ID=your-google-client-id
AUTH_GOOGLE_SECRET=your-google-client-secret
MAILERSEND_API_KEY=your-mailersend-key
MAILERSEND_FROM_EMAIL=noreply@yourdomain.com

# Comma-separated list of emails that are auto-promoted to admin on first sign-in
ADMIN_EMAILS=maxime@pauseia.fr

# Unsubscribe token signing secret (generate with: openssl rand -hex 32)
UNSUBSCRIBE_SECRET=your-unsubscribe-secret-here

# Webhook signing secrets (required in production — webhooks are rejected without them)
MAILERSEND_WEBHOOK_SIGNING_SECRET=your-mailersend-webhook-signing-secret
TALLY_WEBHOOK_SIGNING_SECRET=your-tally-webhook-signing-secret

# Public URL for unsubscribe links
NEXT_PUBLIC_APP_URL=http://localhost:3000

# Development only — set to "true" to bypass auth (requires NODE_ENV=development)
DEV_BYPASS_AUTH=false